$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft File: SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft (raw, json) Hash identifier: JmVRnJY312+673m9B/6lvun1/zL6ctXlPbgEdOMH10s= Subject key identifier: A2:64:E6:FF:7F:9B:10:04:69:6F:92:23:78:A6:70:1C:BB:32:4A:48 Authority key identifier: 49:47:5B:59:75:F1:97:98:95:A3:C6:E4:41:83:E4:BC:A2:E8:34:6F Certificate issuer: /CN=A91BC4FF/serialNumber=49475B5975F1979895A3C6E44183E4BCA2E8346F Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft Manifest number: 1A Signing time: Sat 23 Nov 2024 05:50:22 +0000 Manifest this update: Sat 23 Nov 2024 05:50:22 +0000 Manifest next update: Sat 30 Nov 2024 05:50:22 +0000 Files and hashes: 1: SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl (hash: 7vYRp6cmv+WTZMm/OOw7RvCmFW8hoL+N84nkmaXfNBc=) 2: 35525B92845611EFB053C341C4F9AE02.roa (hash: WnW59BqD7yxG6xwyHVyCL3N6dDBnzflFu8yKPNbhrU4=) 3: 35C99D4C845611EFB053C341C4F9AE02.roa (hash: V78F/sUvRrSVdDJyDfEyty7/vxO3/r50Hl6d0lC1src=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Nov 2024 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC4FF/serialNumber=49475B5975F1979895A3C6E44183E4BCA2E8346F Validity Not Before: Nov 23 05:50:22 2024 GMT Not After : Nov 30 05:50:22 2024 GMT Subject: CN=67416d1e-7944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:4b:84:14:3e:0d:8d:9c:ce:67:b4:2e:6a:9b: a1:a9:c4:e0:40:6b:a7:cc:6e:58:30:21:ca:0c:1c: 67:f5:2e:3f:53:6b:50:ce:a1:16:36:a9:09:ea:bc: cf:c9:17:25:5e:eb:6b:41:81:15:78:bc:19:dc:52: 42:8d:9b:62:41:8c:2b:a1:d8:0d:1b:a3:05:f8:0f: 1d:19:b9:c6:ed:92:a7:0c:43:04:9c:f4:ac:60:5e: d9:7b:ac:8d:29:b9:fa:a7:11:ea:7d:e8:d4:35:55: 8b:de:8d:6b:90:5a:4d:17:a1:42:01:93:5d:e8:3a: da:8c:d9:25:35:28:14:c2:19:6d:49:bd:5b:0d:4c: 11:fa:3b:b3:ea:22:2a:1f:fa:47:a8:04:04:ee:6c: df:97:24:20:a9:95:a4:7b:28:20:14:e8:69:53:4d: 03:e4:79:e0:5d:80:07:15:8f:a9:b8:d1:54:c4:2f: df:e1:b2:8f:03:8f:30:6e:7a:d1:7f:91:64:5e:9f: 8a:a3:ad:a5:7f:dd:f0:81:9b:b1:9b:84:b3:19:5b: 32:87:5c:23:9a:cc:11:c4:d4:34:12:1d:79:b4:87: c3:da:0f:ac:65:2d:0f:db:1d:66:2f:6a:da:65:49: c1:ef:73:c5:13:2c:dd:b5:d9:fb:e4:5a:3b:66:76: fe:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:64:E6:FF:7F:9B:10:04:69:6F:92:23:78:A6:70:1C:BB:32:4A:48 X509v3 Authority Key Identifier: keyid:49:47:5B:59:75:F1:97:98:95:A3:C6:E4:41:83:E4:BC:A2:E8:34:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SUdbWXXxl5iVo8bkQYPkvKLoNG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC4FF/9C56BE42845511EFB76D2740C4F9AE02/SUdbWXXxl5iVo8bkQYPkvKLoNG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:b8:9f:92:72:fc:a6:41:3b:9d:08:cc:9f:f4:c8:60:a2:65: ce:4b:b8:43:07:dd:62:2a:aa:60:9c:44:76:ef:36:71:15:00: 0e:4f:ec:1c:98:f2:1b:19:6c:7e:bd:d1:cd:be:c5:b6:48:66: b5:6f:59:00:90:c8:04:bf:66:f8:a3:db:7f:0c:e1:83:0c:84: 29:e2:df:ec:9d:76:b5:ac:5c:9b:5c:d2:ee:a2:09:a3:8c:59: 0c:3b:35:8c:4f:a6:5a:b8:9f:16:68:7b:75:7b:ba:69:9d:56: bc:22:c9:79:b8:2b:ba:e6:ea:25:72:ae:6a:d9:e9:48:40:2b: 16:83:67:8b:b1:b9:21:ab:12:d3:00:86:29:5c:99:45:77:ac: ed:cf:08:b2:74:0b:f6:b8:57:37:a5:f6:7f:e8:8f:53:63:1d: 08:e9:09:22:4c:77:fc:81:c1:5c:60:07:90:97:32:e4:3b:45: 32:c4:01:29:33:b0:ef:0b:d3:07:ff:17:f8:39:85:7a:48:b5: 44:cd:a6:ad:b6:e6:f2:e3:c7:f0:08:0c:5a:41:cd:39:3c:39: 7a:94:75:55:80:40:2b:6c:15:89:46:e5:68:bb:3b:c2:c6:66: 7b:17:fd:e3:ce:e0:24:21:78:14:7f:c6:38:e6:83:11:b4:0e: 81:d7:89:e7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QzRGRjExMC8GA1UEBRMoNDk0NzVCNTk3NUYxOTc5ODk1QTNDNkU0NDE4M0U0QkNB MkU4MzQ2RjAeFw0yNDExMjMwNTUwMjJaFw0yNDExMzAwNTUwMjJaMBgxFjAUBgNV BAMTDTY3NDE2ZDFlLTc5NDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfS4QUPg2NnM5ntC5qm6GpxOBAa6fMblgwIcoMHGf1Lj9Ta1DOoRY2qQnqvM/J FyVe62tBgRV4vBncUkKNm2JBjCuh2A0bowX4Dx0ZucbtkqcMQwSc9KxgXtl7rI0p ufqnEep96NQ1VYvejWuQWk0XoUIBk13oOtqM2SU1KBTCGW1JvVsNTBH6O7PqIiof +keoBATubN+XJCCplaR7KCAU6GlTTQPkeeBdgAcVj6m40VTEL9/hso8DjzBuetF/ kWRen4qjraV/3fCBm7GbhLMZWzKHXCOazBHE1DQSHXm0h8PaD6xlLQ/bHWYvatpl ScHvc8UTLN212fvkWjtmdv5TAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUomTm/3+b EARpb5IjeKZwHLsySkgwHwYDVR0jBBgwFoAUSUdbWXXxl5iVo8bkQYPkvKLoNG8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJDNEZGLzlDNTZCRTQyODQ1 NTExRUZCNzZEMjc0MEM0RjlBRTAyL1NVZGJXWFh4bDVpVm84YmtRWVBrdktMb05H OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvU1VkYldYWHhsNWlWbzhia1FZUGt2S0xvTkc4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJD NEZGLzlDNTZCRTQyODQ1NTExRUZCNzZEMjc0MEM0RjlBRTAyL1NVZGJXWFh4bDVp Vm84YmtRWVBrdktMb05HOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACW4n5Jy/KZBO50IzJ/0yGCiZc5LuEMH3WIqqmCcRHbvNnEVAA5P7ByY 8hsZbH690c2+xbZIZrVvWQCQyAS/Zvij238M4YMMhCni3+yddrWsXJtc0u6iCaOM WQw7NYxPplq4nxZoe3V7ummdVrwiyXm4K7rm6iVyrmrZ6UhAKxaDZ4uxuSGrEtMA hilcmUV3rO3PCLJ0C/a4Vzel9n/oj1NjHQjpCSJMd/yBwVxgB5CXMuQ7RTLEASkz sO8L0wf/F/g5hXpItUTNpq225vLjx/AIDFpBzTk8OXqUdVWAQCtsFYlG5Wi7O8LG ZnsX/ePO4CQheBR/xjjmgxG0DoHXiec= -----END CERTIFICATE-----Generated at Sat Nov 23 07:45:05 2024 by rpki-client on console-ams.rpki-client.org